What your browser keeps

Whom to ask about your data

The operator of dentalimplantcostestimator.com, at contact@dentalimplantcostestimator.com.

The short answer

The teeth you tap, your state, your quotes, your plan details and your income are processed by your own browser alone. No server receives them, nothing records them, and no cookie is placed. What the browser stores, it stores so that you don't retype everything next time, and you can wipe any of it.

Every item kept on your device

"Clear this site's data" means the option in your browser's settings that deletes stored data for one website. A spreadsheet or summary you export is assembled on the device itself and lands wherever you put it, nowhere else.

Cloudflare, which delivers the pages

Pages reach you through Cloudflare's network. To get each page to your screen and to fend off automated attacks, Cloudflare has to handle every request and, with it, the IP address it arrives from. The ground for that is Article 6(1)(f) of the GDPR: a legitimate interest in delivering the pages and keeping the site secure. Cloudflare processes this traffic data under its own privacy policy, which describes it as a processor for what crosses its network; for transfers out of Europe, that policy names the EU-U.S. Data Privacy Framework, with the European Commission's standard contractual clauses as the fallback. The site itself stores no list of visitors' addresses, and none of that traffic is used for tracking or building profiles of people.

An email you send: the legal ground and the deadline for deleting it

Writing to contact@dentalimplantcostestimator.com is the one way personal data reaches the operator: your address, any name in it, the text and whatever you attach. Under the EU GDPR and the UK GDPR, the ground relied on is Article 6(1)(f), a legitimate interest, which here means reading what you wrote, replying to it and fixing a page if you have spotted a mistake. Article 6(1)(b), steps taken at your request before or under a contract, was considered and set aside: nothing is sold, no account exists and no agreement ever forms between you and the site, so claiming it would not be honest. Your message is not added to a mailing list, used for marketing, sold or passed to anyone else.

On the way in, Cloudflare's email forwarding passes the message on to an ordinary email account the operator holds with a provider based outside the EU. That account is a regular mailbox, not a service engaged under a data processing contract, so the provider handles what it receives under its own terms and privacy policy. Moving your message there is a transfer out of Europe. It rests on the European Commission's adequacy decision for the EU-U.S. Data Privacy Framework (GDPR Article 45), with its UK extension, in which that provider states it takes part; where that does not apply, the provider says it uses the Commission's standard contractual clauses. Cloudflare's own safeguards for the forwarding step are those described in the section above.

How long it stays: while the exchange is still going, and then for at most 30 days past the final reply, when the thread is deleted. Messages that need no answer, such as advertising, are deleted when read. A message carrying medical images, records or ID numbers is deleted as soon as its contents show what it holds, and no copy of it is kept, as the contact page explains.

Seeing, fixing or removing what you sent

You may request a copy of the messages held from you, for a correction, for deletion, or for use to be paused while a dispute is settled (GDPR Articles 15 to 18). Since the ground is a legitimate interest, you may also object under Article 21; an objection is honored by deleting the thread. The right to receive data in a machine-readable format (Article 20) covers processing based on consent or a contract, so it does not strictly reach these emails, but a copy of your own messages goes out on request all the same. Send any of these requests to contact@dentalimplantcostestimator.com; the answer comes within one month. No decision about you is ever made by software. If you live in a US state with its own privacy statute, California for instance, whatever extra it grants you applies too.

Taking a complaint to a data protection regulator

If you think your data has been mishandled, you can complain to a supervisory authority without contacting us first (GDPR Article 77). In the EU, Iceland, Liechtenstein and Norway, you can turn to the regulator in your home country, the one where you work, or the one where the problem arose; the European Data Protection Board keeps the list of national authorities with their websites. In the United Kingdom, it is the Information Commissioner's Office, which takes complaints about the use of personal information online.

Wording checked 2026-11-07